In one example, a system includes one or more personal protective equipment (PPE) devices each configured to be worn by a worker, the PPE devices each including one or more sensors that generate activity data indicative of activities of workers operating within one or more work environments. The system also includes a computing device, the computing device configured to: identify, based at least on the activity data, a plurality of clusters of one or more entities, wherein each entity of the entities is associated with one or more of the workers; and output an indication of a difference between performance by a target entity with respect to safety events and performance by the cluster that includes the target entity with respect to safety events.