Impressions from PyCon DE & PyData 2026 in Darmstadt

In April, our developer Tobias attended PyCon DE & PyData 2026 in Darmstadt. Between talks, discussions, and spontaneous conversations during lunch breaks, one thing quickly became clear: AI agents have officially arrived in everyday software development.

The conference venue, the “darmstadtium”, even felt a bit like a trip back to university days. The lecture halls are named after chemical elements, which immediately reminded Tobias of materials science lectures from his mechanical engineering studies. After all, Darmstadt is widely regarded as one of Germany’s leading hubs for materials science, while KIT, where Tobias himself studied, remains the eternal runner-up.

AI Agents Everywhere

One topic appeared throughout almost every talk and panel discussion: AI agents are changing the way software is built.

One particularly interesting panel focused on how developers and tech leads are already integrating AI into their daily workflows, as well as the opportunities and risks they see for the future.

What stood out most was that there is still no universally established workflow. Teams are experimenting, testing different tools, and figuring out their own approaches to AI-assisted development. Especially for data-intensive or highly complex tasks, many developers still intentionally prefer manual implementation.

Another interesting trend was the increasing use of Markdown for defining requirements. Requirements and implementation are moving closer together. This is something we have also observed at geOps, and we are currently adapting our own processes accordingly.

Between Productivity and Security Concerns

Alongside the excitement around productivity gains, security was one of the conference’s recurring themes.

Mistakes when using AI tools often happen unintentionally and almost casually: sensitive information ends up in prompts, gets processed externally, or is stored without developers fully realizing it. At the same time, AI-generated code can introduce new vulnerabilities when outputs are accepted without proper review.

One question kept surfacing repeatedly:

Who can I actually trust?

Not only the tools themselves, but also their generated results need to be critically evaluated. Trust is becoming less of a default assumption and more of a conscious decision within the development process.

Another strong takeaway was that today, virtually every company can become a target of automated attacks. The old assumption that “nobody would bother attacking us anyway” no longer applies. Automated attacks scale effortlessly and do not differentiate between large enterprises, startups, or small projects.

Security Still Requires Humans

Another talk focused specifically on security in the age of coding agents.

AI can help identify vulnerabilities faster, analyze code more efficiently, and generate tests automatically. Especially in testing, many teams see enormous potential for accelerating quality assurance.

Still, one thing remained undisputed: it is not only important that something gets tested, but what gets tested. The strategy behind testing remains a fundamentally human responsibility.

Conversations Between Insurance and Industry

Some of the most interesting insights came from conversations outside the official talks. During one lunch break, Tobias exchanged ideas with developers from the insurance sector and industrial manufacturing.

Everyone was already using AI in some form, but at very different levels of adoption. While some mainly relied on advanced tab completion, others were already generating large portions of their code using coding agents.

This naturally led to an interesting discussion:

For which types of projects do coding agents currently provide the greatest value?

The general consensus was: primarily for greenfield projects with relatively few existing interface constraints. As soon as complex API or UI dependencies come into play, the coordination and validation effort increases significantly.