An apparatus comprising: hardware and software; wherein the hardware comprises: speculation vulnerability mitigation hardware to mitigate speculation vulnerabilities; speculation vulnerability detection hardware to detect vulnerability to a speculative execution attack and, in connection with a detection of vulnerability to a speculative execution attack, to provide an indication, to the software, that data from a first operation is tainted, wherein the indication comprises at least one of a prediction of an attack, a category of an attack, and/or a confidence level of an attack; execution hardware to perform a second operation using the data if the second operation is to be performed non-speculatively and to prevent performance of the second operation if the second operation is to be performed speculatively and the data is tainted; wherein the software comprises a system software and an application software, the system software is configured to determine, based on the indication, a mitigation switch policy to apply to the speculation vulnerability mitigation hardware, wherein the hardware is configured to receive configuration information, as determined by the system software, based on the mitigation switch policy, the configuration information comprises one or more weight vectors, and wherein the speculation vulnerability mitigation hardware is dynamically reconfigured based on the one or more weights vectors to provide dynamically varying levels of speculation vulnerability mitigation. hardware and software; wherein the hardware comprises: speculation vulnerability mitigation hardware to mitigate speculation vulnerabilities; speculation vulnerability detection hardware to detect vulnerability to a speculative execution attack and, in connection with a detection of vulnerability to a speculative execution attack, to provide an indication, to the software, that data from a first operation is tainted, wherein the indication comprises at least one of a prediction of an attack, a category of an attack, and/or a confidence level of an attack; execution hardware to perform a second operation using the data if the second operation is to be performed non-speculatively and to prevent performance of the second operation if the second operation is to be performed speculatively and the data is tainted; wherein the software comprises a system software and an application software, the system software is configured to determine, based on the indication, a mitigation switch policy to apply to the speculation vulnerability mitigation hardware, wherein the hardware is configured to receive configuration information, as determined by the system software, based on the mitigation switch policy, the configuration information comprises one or more weight vectors, and wherein the speculation vulnerability mitigation hardware is dynamically reconfigured based on the one or more weights vectors to provide dynamically varying levels of speculation vulnerability mitigation. speculation vulnerability mitigation hardware to mitigate speculation vulnerabilities; speculation vulnerability detection hardware to detect vulnerability to a speculative execution attack and, in connection with a detection of vulnerability to a speculative execution attack, to provide an indication, to the software, that data from a first operation is tainted, wherein the indication comprises at least one of a prediction of an attack, a category of an attack, and/or a confidence level of an attack; execution hardware to perform a second operation using the data if the second operation is to be performed non-speculatively and to prevent performance of the second operation if the second operation is to be performed speculatively and the data is tainted; wherein the software comprises a system software and an application software, the system software is configured to determine, based on the indication, a mitigation switch policy to apply to the speculation vulnerability mitigation hardware, wherein the hardware is configured to receive configuration information, as determined by the system software, based on the mitigation switch policy, the configuration information comprises one or more weight vectors, and wherein the speculation vulnerability mitigation hardware is dynamically reconfigured based on the one or more weights vectors to provide dynamically varying levels of speculation vulnerability mitigation.