Bring legacy stacks into the present.
WordPress sites stuck in 2014, jQuery dashboards no one wants to maintain, multi-page monsters bleeding conversion. We rebuild them as fast, modern, maintainable systems — without losing what already works.
A Tokyo studio for teams that need it shipped right. Bilingual EN/JP, scoped engagements, no theater.
We don't pad the menu. Each engagement focuses on one of three core capabilities — or the natural intersection between them.
WordPress sites stuck in 2014, jQuery dashboards no one wants to maintain, multi-page monsters bleeding conversion. We rebuild them as fast, modern, maintainable systems — without losing what already works.
Threat modeling, audits, hardening, and incident response — focused on what actually moves your risk profile.
LLM-powered features that survive production — agents that actually work, evals that catch regressions, retrieval that retrieves the right thing. Built for reliability, not hype.
Performance, security posture, code review, infra. Written reports your engineers will actually read.
No standing retainers, no padding. We work in 4–8 week scoped engagements with explicit deliverables on day one.
One week. We map your stack, talk to your team, and produce a concrete scope with deliverables, milestones, and pricing — fixed, not hourly.
Four to six weeks of focused work. Weekly demos in your timezone. Direct Slack channel. Zero status meetings — progress is visible in the work.
Documentation your team can actually use, runbooks, and a 30-day support window. Optional ongoing advisory if you want it. No lock-in.
Most of our work is under NDA. Here's a sample of recent engagements with the clients' details removed.
From WordPress + jQuery to Next.js. Lighthouse 100/100, content edited via Markdown, EN/JP locale at the routing layer.
Retrieval that retrieves the right thing across EN/JP/ZH content. Eval suite catches regressions before they ship.
Identified two critical pre-prod issues, hardened the auth flow, and shipped a prioritized remediation plan their team owns.

I'm Francisco — security engineer turned full-stack consultant, now based in Tokyo. Twelve years across infra, application security, and web platforms. Before Kakero I worked with teams shipping multilingual products to global audiences and wanted to build something with the same standards but my own client list.
Kakero is intentionally a one-person studio. That means you work directly with the person who's reading your code, not an account manager. It also means I'm selective — three to four engagements running at a time, never more.
Tell us about your project. We respond within one business day, in English or Español (calls available), or 日本語 (email only).