no code neededunlimited viewsfree forever

Trustpilot Review Widgets via iFrame

Embed Trustpilot reviews on environments that strip <script> tags — locked-down CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals. The only free path when TrustBox itself fails because the host blocks scripts.

Key facts: universal <script>-tag fallback · works where TrustBox fails · free Trustpilot profiles supported · no paid TrustBox subscription · same renderer as the script embed · manual min-height (600–800px typical)

Last updated October 11, 2026·by Mike Ragimov

SEO + AI schema · paid plans

Review schema markup, on paid plans

Paid widgets add schema.org Review and AggregateRating JSON-LD to the page they sit on, so search engines and AI answer engines can read your Google reviews as structured data. Google does not show review stars for reviews a business shows about itself, so the gain is readability, not stars. The free plan shows the reviews without the schema. See how the schema works

Install guides

iFrame is the universal fallback. Pick a CMS-specific guide if you'd rather use the recommended script embed.

Looking for a different review source? See all Trustpilot widgets

Setting this up on a different platform? See all Trustpilot review widgets · Want a different review platform on iFrame? All review widgets for iFrame

Why Use the iFrame Embed for Trustpilot Reviews?

The universal escape hatch — and the only free path when TrustBox can't run because the host strips scripts.

Bypasses Script-Stripping CMSes

Locked-down enterprise CMSes and intranet portals strip <script> tags by policy. The iframe is a static HTML element — it always survives. SharePoint, ServiceNow, WordPress.com Free, custom IT-locked CMSes.

Works Where TrustBox Fails

Trustpilot's official TrustBox embed is also script-only — there's no published iframe-direct URL. On any host that blocks scripts, TrustBox simply doesn't load. BlooTrue's iframe is the workaround.

No Paid TrustBox Subscription

TrustBox is gated behind Trustpilot's paid plan ($99+/mo). BlooTrue's iframe works with any free public Trustpilot profile — no paid subscription required at any tier.

Same Renderer as Script Embed

The iframe URL is the same endpoint the script loader mounts internally. Pixel-identical Trustpilot review output — same theme, same styles, same data refresh cadence.

How Do I Embed Trustpilot Reviews via iFrame?

Four steps. The only manual bit is extracting your widget ID from the standard snippet.

Build Your Widget and Get the Embed Code

Use the BlooTrue builder on this page. Paste your Trustpilot review URL (e.g. trustpilot.com/review/yourdomain.com), pick a style, then click Get Embed Code below to grab the standard snippet.

You only need a single value out of that snippet — the widget ID. Step 2 covers it.

Pull the Widget ID Out of the Snippet

Read the snippet — your ID is the part after blootrue-widget- in the <div> class.

Example — given class="blootrue-widget-abc123", the ID is abc123. Copy just that string.

Replace the Snippet with an iFrame Tag

Replace the standard <script> + <div> snippet with this iframe instead:

<iframe
  src="https://api.blootrue.com/api/widgets/embed/YOUR_ID/render"
  style="border:0;width:100%;min-height:600px;"
  frameborder="0"
  title="Reviews">
</iframe>

Swap YOUR_ID for the ID you grabbed in step 2. The iframe URL is the same endpoint the script loader mounts internally — same Trustpilot widget, just a different mount strategy.

Paste the iFrame Wherever You Can Write Raw HTML

Paste the iframe wherever you can write raw HTML — locked-down CMSes, SharePoint web parts, ServiceNow content blocks, Notion HTML embeds, headless CMS rich-text fields, intranet portal pages.

Heads-up: iframe mode loses auto-resize, so set min-height generously. 600–800px is typical for Trustpilot widgets — pick the higher end for Grid or Masonry styles. If you set min-height too low you'll see internal scrollbars in the widget.

Reviews still auto-sync from Trustpilot every 24 hours.

Where Does iFrame-Only Embed Make Sense for Trustpilot?

Whenever the host environment strips <script> tags. TrustBox fails on every one of these — BlooTrue's iframe doesn't.

Locked-Down Enterprise CMSes

IT departments often configure CMSes to strip <script> tags as a baseline security policy. Iframe always survives the filter — TrustBox does not.

SharePoint and ServiceNow Intranets

Intranet portals frequently block third-party scripts via Content Security Policy. They typically allow iframes via a dedicated "Embed" or "Page Viewer" web part. Paste the iframe URL there directly.

WordPress.com Free Plan

WordPress.com on the Free plan strips inline scripts. If you're on WordPress.com Free, the iframe embed is the only path — TrustBox cannot run there at any subscription tier.

URL-Only Embed Slots

Notion, some wikis, and headless CMSes whitelist embeds by domain rather than by script. The iframe URL pastes directly into their "Add an embed" or "Embed URL" field.

HTML Newsletters

Most email clients strip both scripts and iframes, but some preserve iframes. When iframes survive, BlooTrue's iframe-direct embed is the only Trustpilot-display option that works in that channel.

Compliance-Strict Environments

Healthcare, legal, and government sites that audit every <script> on a page often prefer iframes because the JavaScript surface area is fully sandboxed. Easier security review, fewer audit exceptions.

Pricing as of September 2026. TrustBox pricing from Trustpilot's official pricing page; Elfsight pricing from Elfsight's official pricing page.

BlooTrue iFrame vs Trustpilot TrustBox

TrustBox is also script-only, also gated behind a $99+/mo paid plan. On script-restricted hosts, BlooTrue's iframe is the only path.

Capability	BlooTrue iFrame	TrustBox
Direct iframe URL published		—
Works on script-stripping CMSes		—
Works with free Trustpilot profile		—
Required Trustpilot subscription	None	A paid plan
Widget view caps	None	Limited
Custom layouts and accent colors		Limited
Pricing for full customization	$9/mo	$99+/mo

Trustpilot Review Widget for iFrame — Universal Embed for Script-Restricted Environments

BlooTrue's Trustpilot Review Widget for iFrame is a free embed for environments that don't allow <script> tags — locked-down CMSes, intranet portals, email-style HTML, and any platform that strips JavaScript loaders. It's the universal escape hatch when the standard script embed is blocked. This matters more for Trustpilot than for most sources because Trustpilot's own TrustBox is also script-only, so on script-restricted hosts there is literally no Trustpilot-shipped option that works. Common targets: locked-down enterprise CMSes that strip <script> tags as a security policy; email signature platforms (HubSpot, Apple Mail templates) where iframes sometimes survive but scripts almost never do; intranet portals like SharePoint and ServiceNow CMS where IT blocks third-party scripts; the old WordPress.com Free plan (which strips scripts); platforms with a "URL-only" embed slot like Notion, some wikis, and headless CMSes that whitelist by domain; and HTML newsletters where the recipient's email client strips scripts but preserves iframes.

Same renderer, different mount point

The iframe URL https://api.blootrue.com/api/widgets/embed/YOUR_ID/render is the same endpoint the standard <script> loader mounts internally. iframe mode renders the exact same widget, just without the auto-resize and the script-driven mounting. Tradeoff: simpler integration, fixed height (you setmin-height manually). Visually pixel-identical to the script-embed output.

BlooTrue iFrame vs Trustpilot TrustBox

TrustBox is Trustpilot's official embed and it is also script-only — there is no published iframe-direct URL for TrustBox. So on a script-restricted host, TrustBox simply does not load. Combined with TrustBox being gated behind Trustpilot's paid plan ($99+/mo), BlooTrue's iframe-direct mode is the only realistic path for free Trustpilot profiles on script-restricted environments.

About Trustpilot reviews in this widget

The Trustpilot widget takes the reviews on your Trustpilot business profile and puts the TrustScore and review count Trustpilot publishes for that profile at the top, not a card average. Reviews reach Trustpilot from customers who write one unprompted or who answer an invitation you send, and Trustpilot labels the invited ones as verified. A free Trustpilot profile is enough: TrustBoxes, Trustpilot's own widgets, render client-side, and this embed needs no TrustBox subscription. The free plan keeps it free for good, like every other platform.

Frequently Asked Questions

Do I need a paid Trustpilot subscription to show my TrustScore on my website?

No. BlooTrue reads any public Trustpilot business profile, free or paid, so a claimed free profile is enough. Trustpilot's own TrustBoxes are a separate product that renders client-side from Trustpilot's script, and you need no TrustBox subscription for this widget. The header is the TrustScore Trustpilot itself reports for your profile.

Is the Trustpilot widget free like the other BlooTrue widgets?

Yes. A Trustpilot widget is free forever with no credit card, the same as every other platform. The free plan shows your reviews from the day you build it with a small BlooTrue badge; a paid plan refreshes your Trustpilot reviews daily and removes the badge.

If my TrustScore changes on Trustpilot, does the number on my site follow?

On a paid plan the widget re-reads your Trustpilot profile every day, so a TrustScore that moves from 4.3 to 4.4 on Trustpilot shows the new value within a day. The widget never averages the reviews it displays to make its own score; it repeats your profile's TrustScore and review count.

Why use the iframe embed for Trustpilot instead of the standard script embed?

Use the iframe embed when the host environment strips <script> tags. The standard script loader is the recommended path because it auto-resizes and mounts inline. But on locked-down enterprise CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals, and HTML newsletters, scripts get stripped — and Trustpilot's own TrustBox embed (also script-only) doesn't work either.

What environments require the iframe-only embed for Trustpilot?

Common ones include: locked-down enterprise CMSes that strip <script> tags as a security policy; SharePoint and ServiceNow intranet portals where IT blocks third-party scripts; the WordPress.com Free plan; Notion and other headless CMSes that whitelist embeds by domain; some wikis that allow only iframe URLs; and HTML newsletters where the recipient's email client preserves iframes but strips scripts.

Do I need a paid Trustpilot or TrustBox subscription to use the iframe embed?

No. BlooTrue works with any public Trustpilot business profile, including free ones. The iframe embed is independent of Trustpilot's own TrustBox product — you don't need a paid Trustpilot plan, you don't need a TrustBox subscription. Just paste your trustpilot.com/review/yoursite.com URL into the BlooTrue builder on this page.

How do I find my widget ID after generating an embed code?

Generate the standard embed code in the BlooTrue builder, then read the <div> class. Your ID is the part after blootrue-widget- — for example, in class="blootrue-widget-abc123" the ID is abc123. Copy that string into the iframe src URL: https://api.blootrue.com/api/widgets/embed/abc123/render.

Can I auto-resize the iframe to match the widget content?

No — and this is the main tradeoff of iframe mode. Cross-origin iframes can't communicate their natural height back to the parent page without postMessage, and most script-restricted environments also strip postMessage handlers. So you have to set a manual min-height on the iframe. For Trustpilot review widgets, 600–800px is a reasonable default.

Will the widget look the same as the script-embed version?

Yes. The iframe URL https://api.blootrue.com/api/widgets/embed/YOUR_ID/render is the same endpoint the script loader mounts internally. Same renderer, same Trustpilot reviews, same theme, same layout — pixel-identical visual output. The only difference is the mount strategy.

Does the iframe embed have the same SEO benefits as the script embed?

No — and this is a meaningful tradeoff. The schema.org Review and AggregateRating JSON-LD lives inside the iframe document, not on the host page. Google does not bubble schema from a cross-origin iframe up to the parent page, so star rich snippets won't fire on the host URL via the iframe embed. If you need rich snippets on the host page, use the standard script embed — it injects the JSON-LD directly into the host page's DOM. The iframe embed is purely a visual display option for environments where scripts aren't allowed.