diff --git a/zap/.env b/zap/.env
new file mode 100644
index 0000000..762fc79
--- /dev/null
+++ b/zap/.env
@@ -0,0 +1,10 @@
+# .env file for OWASP ZAP Docker Compose
+# You can generate a random, strong API key using a tool like `openssl rand -hex 32`
+ZAP_API_KEY=your_strong_and_secret_api_key_here
+
+# The ports for ZAP's UI and API
+ZAP_UI_PORT=8080
+ZAP_API_PORT=8090
+
+# The name of the persistent volume for ZAP's data
+ZAP_VOLUME_NAME=zap_data_volume
\ No newline at end of file