A method of operating a push-to-anything (PTX) platform includes receiving, by a data analytics engine (DAE) of the PTX platform, a first input signal from a first input source; calculating, by the DAE, a risk indicator using the first input signal, the risk indicator indicating a level of a security threat; detecting a risk event, by the DAE, when the risk indicator is above a first pre-determined risk threshold, the first pre-determined risk threshold corresponding to a pre-determined level of security threat above which an emergency response protocol is initiated; generating, by the DAE, a group list in response to detecting the risk event, where the group list comprises one or more client devices of the PTX platform; sending, by the DAE, the group list to a PTX server of the PTX platform; and notifying, by the PTX server, the one or more client devices in the group list of the risk event.