We present an approach and a tool to answer the need for effective, generic and easily applicable protections against side-channel attacks. The protection mechanism is based on code polymorphism, so that the observable behaviour of the protected component is variable and unpredictable to the attacker. Our approach combines lightweight specialized runtime code generation with the optimization capabilities of static compilation. It is extensively configurable and mitigations are set-up against security holes related to runtime code generation. Experimental results show that programs secured by our approach present strong security levels and meet the performance requirements of constrained systems.