This study develops a system to assess and rank the web security of Thai university websites using seven key configuration indicators. The system applies semi-passive scanning to generate security scores and rankings, highlighting risks and supporting improvements in web security standards.