Since we first added the WildFly Core SECURITY.md we've created a WildFly-specific security reporting mail list and Kabir wrote https://www.wildfly.org/security/. So WildFly Core should update it's SECURITY.md to have the same content.

Possibly we could just have something simple with a link to https://www.wildfly.org/security/ but my inclination is to duplicate the content so community members immediately see it.