DevOps final year project ideas
DevOps final year project ideas from the free Sefism library, each scoped for a single semester with a suggested stack and deliverables.
- 300 project ideas
Ideas and guidance, not finished projects
These are project ideas and scoping guidance, published free for students to use as a starting point. I do not build, write, or sell final-year projects, and I do not complete coursework for anyone. Take an idea, make it yours, and build it.
77 ideas · page 1 of 4
AI Incident Log and Postmortem Tracker for LLM Products
When an LLM feature misbehaves (a harmful answer, a leaked system prompt, a wrong refund, a runaway cost spike), most teams handle it in a chat thread and forget it. Build an incident tracker designed for AI failures: capture the exact prompt, context and model version, classify the failure, run a blameless postmortem, turn the case into a regression test, and track whether the fix held.
AI API Spend Attribution per Feature and Customer with Budget Guards
AI features have a cost per request that changes with prompt length, model choice and retries, and a single heavy customer or a bug in an agent loop can burn a month's budget in a day. Build a lightweight library and collector that tag every AI call with feature, customer and model, compute cost from token counts, show cost per feature and per customer, detect unusual spend quickly, and enforce budgets before the bill arrives.
Court Cause List and Hearing Date Alerts for Litigants and Small Law Chambers
Missing a hearing date can mean a case is dismissed or delayed for months, yet many litigants and small law chambers still check court cause lists by hand. Build a service that reads publicly published cause lists from a few chosen courts on a schedule, matches them to cases a user is following, and sends reminders the day before. The engineering focus is reliable parsing of inconsistent PDFs and pages, and alerts that never miss a match.
Pipeline That Turns Provincial Statistical PDFs into a Versioned Open Dataset
Governments publish important statistics as PDF yearbooks and reports: schools, hospitals, crops, prices and population by district. Build a data pipeline that extracts tables from these PDFs, cleans and checks them, tracks every change between editions, and publishes them as tidy, documented, versioned datasets that journalists, students and researchers can query directly.
PII and Secret Leak Audit for LLM Chat Logs and Traces with Retention Rules
LLM apps log everything: prompts, retrieved chunks, tool results and answers. Those logs quietly fill up with phone numbers, CNIC numbers, addresses, API keys and other users' data. Build an auditor that scans existing LLM traces, finds personal data and secrets in English, Urdu and Roman Urdu, shows where each leak entered the pipeline, and enforces retention and masking rules going forward.
Government Notification Watcher with Plain-Language Summaries and Topic Alerts
Tax notifications, regulatory circulars and gazette notices change rules for small businesses and citizens overnight, but they are published as scanned PDFs on scattered government websites. Build a monitored pipeline that checks chosen official pages on a schedule, detects new documents, extracts text (with OCR when needed), writes a short plain-language summary with the source linked, and alerts subscribers by topic. Treat it as a reliability and cost engineering project.
FOCUS Format Converter for Smaller Cloud Providers and AI API Bills
The FinOps Open Cost and Usage Specification (FOCUS) gives cloud bills a common format, and the big clouds now export it. Startups also pay smaller hosts, AI API providers and SaaS tools whose bills arrive in their own formats. Build converters that turn those bills into valid FOCUS data, a validator, and a dashboard that shows total cost and unit cost (per customer or per feature) across every provider in one place.
Hallucinated Package Guard for AI Coding Assistants (Slopsquatting Defence)
AI coding assistants sometimes suggest packages that do not exist. Attackers can register those names and wait. Build a guard that checks every new dependency added to a project, by a person or an AI, against the real registry: does it exist, how old is it, who maintains it, does it look like a typo of a popular package, and was it suggested by an AI? It runs in the editor, as a pre-commit hook and in CI.
Heat Action Plan Alert System with District Thresholds, Voice Messages and Acknowledgements
Cities in South Asia and the Gulf now have heat action plans, but alerts still travel by phone calls and WhatsApp forwards, and nobody knows who received them. Build a multi-channel alert system that reads weather forecasts, applies each district's agreed thresholds, sends staged warnings by SMS, voice call and email to hospitals, schools and field teams in local languages, and tracks acknowledgements and actions taken.
Acoustic Early Detection of Red Palm Weevil Larvae in Date Palm Trunks
The red palm weevil kills date palms from inside, and by the time a tree shows symptoms it is often too late. Build a low-cost clip-on sensor that records vibrations in the trunk, an embedded classifier that separates larval feeding sounds from wind, traffic and birds, and a dashboard for farm managers. Test it on recordings from infested and healthy trees with an entomology partner.
Production-Ready ASP.NET Core API for Intercity Bus Seat Booking
Most student APIs stop at CRUD. Build an intercity bus seat booking API in ASP.NET Core that is production-ready from day one: safe seat holds under heavy concurrency, health checks, rate limiting, OpenTelemetry traces and metrics, structured logging, problem details errors, migrations, integration tests with real databases and a load test for the Eid travel rush. Publish it as a template others can start from.
Data Contract and Schema Drift Checker for Event Pipelines
When an app team renames a field or changes a type, the analytics pipeline downstream breaks quietly and dashboards show wrong numbers for weeks. Build a tool that lets producers and consumers agree a data contract in a standard YAML format, checks every pull request and every batch of events against it, explains breaking changes before they ship, and tells the right people what will break.
Prompt Change Regression Evals in Pull Requests with Statistical Diffs
Teams change a prompt, swap a model or tweak retrieval and only find out a week later that something broke. Build a GitHub Action that detects AI-related changes in a pull request, runs the affected eval suites against the old and new versions, accounts for the randomness in LLM outputs with repeated runs and confidence intervals, and posts a clear diff of what got better, what got worse, and what it costs.
Team-Wide MCP Configuration Inventory and Least-Privilege Auditor
Developers now plug MCP servers into Claude, Cursor, VS Code and other AI tools with a few lines of config, often with a full-access GitHub token, a whole home folder as the filesystem root, and an unpinned package run with npx. Build an auditor that collects MCP configurations across a team's machines, inventories every server and credential, scores each against least-privilege rules, and proposes a tighter config.
Plug-In Voltage and Outage Logger for Mapping Neighbourhood Power Quality
Build a plug-in device that records every power cut, voltage dip and surge at a home or shop, and combine many of them into a public map of power quality by neighbourhood. Households across Pakistan and South Asia buy stabilisers and lose appliances to bad voltage, but have no record to show the utility. Independent, timestamped measurements turn complaints into evidence.
Load-Shedding-Aware Server Shutdown and Restart Orchestrator for Small Offices
Build a service that watches a small office's UPS or solar inverter battery during power cuts and shuts down servers, virtual machines and containers in the right order before the battery runs out, then brings everything back and checks it is healthy when power returns. Offices in Pakistan running a local server through daily load shedding lose data and hours to dirty shutdowns. This makes each outage boring.
Signed Build Provenance Gate for a Company's Internal Packages and Container Images
Build a gate that lets a small company prove every internal package and container image was built by its own CI from a reviewed commit, and blocks anything that was not. It uses keyless signing from the Sigstore project and SLSA-style provenance, wrapped into a setup a team can adopt in an afternoon. Deployments and installs check the signature and the build record before they proceed.
Solar Tube-Well Pump Run-Time and Groundwater Level Logger for Farmers
Build a low-cost, brand-agnostic logger that retrofits onto a farm's solar water pump and records solar power, pump run-time, water pumped and the water level in the well, then shows daily water delivered and how far the water table falls and recovers. Solar pumps make pumping almost free to run, which can drain aquifers unnoticed. Farmers get fault alerts and water records; researchers and water agencies get groundwater data they rarely have.
Power-Cut-Resilient Programming Lab Exam Server That Runs on the Local Network
Build a self-hosted exam system for university programming labs that runs on a single server inside the lab, saves every keystroke-level change so no student loses work when power or Wi-Fi drops, runs code in sandboxes for automatic test results, and gives invigilators a live view of the room. Load-shedding, unstable internet and shared lab machines make online exam platforms fragile in Pakistani universities. The hard parts are crash-safe saving, fair resumption and safe code execution.
Alert Noise Analyser and Replay Tool for Small On-Call Teams
Build a tool that collects a team's alert history from Prometheus Alertmanager or Grafana, measures which alerts are noisy (flapping, self-resolving, never acted on, firing at night), groups alerts that fire together into likely single incidents, and replays history against proposed rule changes to show how many pages would be saved without missing real incidents. Small teams burn out on noisy pages. This turns alert tuning from guesswork into evidence.
Cloud Data Transfer Cost Attribution from Flow Logs for Small Teams
Build a tool that reads VPC flow logs and the cost and usage report from an AWS account, works out which service talks to which and over what path (same zone, cross-zone, NAT gateway, internet, cross-region), and attributes data transfer charges to the services and teams that cause them. Small teams see a large data transfer line on the bill and cannot tell where it comes from. The tool turns that line into a ranked list of flows with fixes.
Synthetic Patient Records Generator with a Privacy Attack Report for Hospital Data Sharing
Build a tool that takes a hospital table, generates synthetic records with several methods, and then attacks its own output to measure how much real patient information leaks. Hospitals want to share data with students and researchers, and synthetic data is often sold as automatically private. This project produces a report that shows both the usefulness and the privacy risk of each synthetic dataset before anyone shares it.
Flaky Test Detector for GitHub Actions That Uses Change Coverage Instead of Reruns
Build a CI tool that decides whether a failing test is flaky without rerunning it, by checking whether the failing test executed any of the code the commit changed. A test that fails without touching the change is almost certainly flaky. The tool labels failures on pull requests, tracks flaky tests over time and saves the CI minutes that blanket reruns waste.
Kubernetes Network Policy Generator With Pre-Apply Connectivity Tests to Stop Lateral Movement
Build a tool that watches which services in a Kubernetes cluster actually talk to each other, generates least-connection network policies from that traffic, and tests them in CI against the expected connectivity before they are applied, so nothing legitimate breaks. Most clusters run with no network policies at all, which lets an attacker who breaks into one pod reach every database and internal API. This makes locking them down safe enough to actually do.
Browse project ideas by domain and difficulty
Each of these is its own page, so you can send someone straight to the AI ideas or the beginner ones.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
- 1:1 Mentorship
- Fresh Graduate Mentorship
- Career Guidance
Brand deals, promos and partnerships: tauseeffayyaz@gmail.com
Follow along
New writing, resources and project ideas land here first.